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The acceptability of cancer risk requires consideration 
of factors that extend beyond mere numerical repre¬ 
sentations, such as either individual lifetime risk in 
excess of background and excess incidence. Recently, 
use of these numbers has been tempered by the addi¬ 
tion of qualitative weights-of-evidence that describe 
the degree of support provided by animal and epide¬ 
miologic results. Nevertheless, many other factors, 
most of winch are not quantitative, require incorpora¬ 
tion but remain neglected by the analyst eager to use 
quantitative results. 

In this paper we show that simple risk measures are 
often fraught with problems. Moreover, these mea¬ 
sures do not incorporate the very essence of accept¬ 
ability, which includes notions of responsibility, ac¬ 
countability, equity, and procedural legitimacy, 
among others. We link the process of risk assessment 
to those legal and regulatory standards that shape it. 
These standards are among the principal means to 
resolve risk-related disputes and to enhance the bal¬ 
ancing of competing interests when science and law 
meet on uncertain and often conjectural ground. 

We conclude the paper with a proposal for the port¬ 
folio approach to manage cancer risks and to deal with 
uncertain scientific information. This approach leads 
to the concept of “provisional acceptability,” which 
reflects the choices available to the decisionmaker, 
and the trade-offs inherent to such choices. 


Agencies, industry, and the public demand clear standards 
forjudging the acceptability of risks. Numerical values could 
reduce debate and ambiguity, clarify the responsibilities of 
businesses, and provide data for regulatory, judicial, and 
legislative deliberations. 1 ’ 2 

Recognizing that a single risk level is not appropriate in all 
contexts, it is tempting to propose specific numerical “ac- 
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ceptability” values for different classes of risks. 3 For exam¬ 
ple, the average acceptable excess individual lifetime fatality 
probability of cancer from occupational exposures (assum¬ 
ing full disclosure and informed consent) might be set at 1 X 
10~ 4 , A level of 1. X 10~ 6 could be defined as acceptable for 
the general public experiencing involuntary exposures. A 
much higher risk level, such as 1 X 10~ 3 , might be appropri¬ 
ate for sales of inherently dangerous products to fully in¬ 
formed, willing customers. Aggregate incidence could be ac¬ 
ceptable if it were less than some value, for example, unity. 
However, even such a range of numbers over different con¬ 
texts is neither conceptually adequate nor sufficient as a 
basis for responsible decisionmaking. 

Whether a risk is “acceptable” generally depends not only 
on its objective quantitative probability and the nature and 
severity of the consequences, but also on societal and politi¬ 
cal factors. Single numerical estimates of individual and 
population risks do not incorporate those qualitative aspects 
of risk. Protection of individual rights, the equity of risk- 
benefit distribution, prudence when facing uncertainty, the 
absence of knowledge, the legitimacy of the risk manage¬ 
ment process, and public attitudes toward and perceptions 
of risks do not lend themselves well to bare numerical repre¬ 
sentations. 4 

This paper examines these issues, assesses some current 
approaches to social and legal risk management, and pro¬ 
poses a risk-portfolio approach in which risk acceptability is 
an evolving concept. We begin with three concepts of risk. 

Individual and Population Risks 

Two related concepts are useful in describing risk to an 
individual: the total risk to an individual of a particular 
adverse health consequence, such as cancer; and the concept 
of an attributable risk describing the incremental contribu¬ 
tion to total risk made by a particular source or cause (e.g., 
the contribution made by cigarette smoking to the risk of 
lung cancer). Finally, we discuss population risk , in which 
individual risk is aggregated over the population at risk. 

Total Individual Risk 

The total risk to an individual of developing some undesir¬ 
able health response, such as death from cancer, may be 
defined as the probability that he will develop the response 
in a given year t, if he has survived until then. This probabili¬ 
ty is also called the individual’s discrete time “hazard rate” 

JAPCA 


Source: https://www.industrydocuments.ucsf.edu/docs/xfclOOOO 


2025545991 




for the response in year t. Hazard rates can be used to 
calculate probabilities of cause-specific deaths or illnesses, 
to derive survival time probability distributions, and to 
quantify total risks over time. 5 * 6 Individual hazard rates for 
chronic health effects typically depend on the exogenous 
factors to which an individual has been exposed, including 
the extent of exposure to a particular chemical or radiation. 
Endogenous factors such as the efficiency of the body’s re¬ 
pair mechanisms, genetic predisposition toward response, 
and so forth, may also affect individual hazard functions. 
Endogenous factors mediating between exposures and 
health responses usually vary widely across individuals and 
often cannot be observed. Thus, individual responses to spe¬ 
cific exposures are quite heterogeneous. Even if an individ¬ 
ual knew his own exposure history to a chemical, he would 
generally remain uncertain about his 'Own future hazard 
function, and hence, about his probability of adverse re¬ 
sponse. 

A probl em often overlooked in discussing risk numbers is 
that interpreting them in terms of expected annual frequen¬ 
cies, or average times until occurrence, can be misleading. 
For example, a leukemia hazard rate from exposure to ben¬ 
zene in the workplace of one expected excess case per million 
person-years of exposure does not imply that the probability 
of a randomly selected worker developing cancer from a year 
of exposure is 1 X 10~ 6 . For any individual, it is considerably 
more likely than not that the actual waiting time to the First 
arrival will be less than the average (or “expected”) waiting 
time. 5 The probability that a randomly selected individual 
will develop cancer from a year of exposure is actually 6.3 X 
10” 5 . The actual individual risk may thus exceed what was 
believed to be acceptable under a simple regulatory scheme 
that requires acceptable exposure to be determined from an 
average risk of, say, 1 X 10“ 6 . 

Attributable Risk 

In practical risk assessment and management, the prob¬ 
lem is not how to estimate an individual’s total risk of some 
health response, but how to estimate the incremental contri¬ 
bution to his risk made by some particular cause or source. 
This is the risk that is said to be attributable to the source. 6 ’ 7 
Few concepts in risk analysis have occasioned as much per¬ 
plexity and debate as that of the risk attributable to a 
source. 8 - 6 

One elementary model that can clarify the meaning of 
attributability postulates that each source of risk “com¬ 
petes” with, other sources to be the first to cause an adverse 
response. Suppose that N sources contribute to the risk in an 
individual. Each source can be thought of as firing a random 
stream of biologically effective molecules that cause “hits” 
in the exposed individual. The average arrival rate or inten¬ 
sity of hits from source i at time t is the source’s hazard rate 
at time t, denoted by hi(t). If the N potential sources of a 
health effect are statistically independent so that the arrival 
rate of hits from one source is unaffected by the presence of 
other sources, then the total risk to the individual at time t 
from all sources is given by the sum h(t) = hi(t) +... + h n (t). 
Since any ijource i will contribute the fraction hi/h(t) of all 
expected hits per unit time at time £, this ratio equals the 
probability that source i contributed the hit that caused the 
observed health response, and h t {t) is the risk attributable to 
source i at time t. 

This “competing risk” definition of attributable risk is 
satisfactory only when the random arrival model correctly 
represents the nature of causation. For example, suppose 
that occurrence of a health effect depends on whether the 
total number of hits received from all sources within a cer¬ 
tain amount of time exceeds a certain threshold. Then, if a 
response occurs, it cannot even in principle be ascribed to 
any single source. 10 Similarly, if the presence of factor A 
doubles the hazard rate from factor B, then a hit from B may 
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be partly blamed on A. In such cases of joint and multiple 
causation, assignment of shares of causation to the different 
■ contributing sources is as much a matter of policy as one of 
science. 8 ' 10 

Population Risk 

Individual risks are not sufficient to determine the effect 
that a risk management choice can have on those at risk. The 
full impact of a choice can only be evaluated by looking at 
the distribution of effects in the affected population as a 
whole. 

If the population at risk consists of several “types” of 
individuals, with each type corresponding to a homogenous 
subpopulation of individuals having identical hazard func¬ 
tions for death from cancer, then in each homogenous sub¬ 
population the amounts of time (number of life-years) that 
the members have left until death will be statistically inde¬ 
pendent, identically distributed random variables. At any 
time, the total number of remaining life-years in the popula¬ 
tion, summed over all the individuals now in it, will be 
approximately normally distributed, with mean and vari¬ 
ance equal to the sums of the means and variances, respec¬ 
tively, of the remaining life-years in each subpopulation. 
The problem of evaluating population risk in large popula¬ 
tions can thus be reduced to the problem of evaluating nor¬ 
mal distributions for the attribute “remaining life-years in 
the population.” This is a standard decision-analytic prob¬ 
lem. 11-13 

If an individual considers himself to be a randomly select¬ 
ed member of the population, then his individual risk is the 
expected value of the risks for all individuals in the popula¬ 
tion. There is a paradox: if two different population risk 
distributions have identical means, then every individual 
should be indifferent among them (based on his own expect¬ 
ed risk). But the distributions may not be equally desirable 
from a societal perspective. In fact, a variety of different 
distributions of risks and uncertainties can occur at the 
population level. It is not the expected number of occur¬ 
rences per million person-years of exposure in the whole 
population that counts in determining equity, but the way 
this risk density is distributed among identifiable subgroups 
of the population. Consider choosing among the following 
situations: 10 

Case A (Uniform population risk): Each of 100 people 
independently is exposed to a 0.01 chance of disease. 

Case B (Anonymous sensitive subpopulation): 10 of the 
100 people are exposed to a 0.10 chance of disease. The rest 
have a zero chance of disease. Now one knows which type he 
is unless and until he gets the disease. 

Case C (Known high risk population): 50 of the 100 people 
(e.g., neighbors living within a certain distance of an indus¬ 
trial facility) are at high risk and know it. Each of these 
individuals has a 0.02 probability of disease; the remaining 
50 people have zero risk. 

Case D (Uncertain individual risk): Each individual has a 
random probability, independently drawn from a uniform 
distribution between 0 and 0.02, of getting the disease. 

Case E (Uncertain population risk): Each individual in¬ 
dependently has the same probability of getting the disease. 
The magnitude of this probability is uncertain; however, it is 
judged equally likely to be anywhere between 0 and 0.02. 

Imagine trying to rank these situations in terms of relative 
social desirability. Simply using the expected number of 
casualties as a summary of population risk results in the 
same assessment of risk (one expected case) for all of these 
examples. Aggregating risk obscures uncertainties, hetero¬ 
geneities, and inequities. The five cases involve important 
trade-offs: between number of people exposed and magni- 
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tude of exp Of sure per person, between certain and uncertain 
risks, and between equitably and inequitably distributed 
risks. 

The concepts of individual and aggregate risks are quanti¬ 
tative expressions that, at best, summarize all relevant bio¬ 
logical information. However important these concepts are, 
there are other social and ethical dimensions that also con¬ 
tribute to risk acceptability. For example, what constitutes 
an acceptable^ risk for one person to offer to another depends 
on both rights (e.g., the right of free choice to assume an 
otherwise “unacceptable” risk) and duties (e.g., the legal 
duty not to endanger others even with their consent). 

Acceptability also depends on the responsibilities that 
acceptance entails. For example, an informed cancer pa¬ 
tient, cognizant of the risks and uncertainties associated 
with a new, unlicensed chemotherapeutic drug, might con¬ 
sider its administration personally acceptable but not ac¬ 
ceptable to administer to someone else. At the other ex¬ 
treme, the social decisionmaker faces accountability: if she 
regulates the specific risk by selecting a specific option, but 
other unknown risks eventually result from her choice, even 
though she may not have been responsible for those risks, 
she may be held socially accountable for them. The next 
section explores these concepts. 

Attitudes To ward Risk 

The issue of voluntary acceptance underlies many debates 
about acceptability in the context of making decisions about 
risks. In a society that values individual choice, a risk that an 
individual is ivilling to take for himself may be acceptable, 
even though, a quantitatively similar risk imposed by anoth¬ 
er is not. 

The concept of voluntary' acceptance of risks has several 
important components. First, there are gradations of “vol- 
luntariness.” A truly voluntary activity is one that an indi¬ 
vidual is free jmd able to reject without penalty, that he can 
control while undertaking, and whose risks are fully known 
or easily discoverable. Less clearly voluntary are activities 
that an individual is intially free to reject without penalty, 
but over which he loses some control over time. Drinking, 
smoking, and other addictive activities are examples. Volun¬ 
tariness may be further compromised when advertisements 
and deliberate inducements play a major role in the initial 
decision to participate in the activity. 14 

The appe*irance of controllability also plays a large role in 
individual judjgments of risk acceptability. So does the belief 
that a truly free choice requires participants to have full 
information about what is being chosen. Right-to-know, 
need-to-know, and duty-to-warn legislation, as well as prin¬ 
ciples goverrdng “adhesion” contracts, make clear the notion 
that lack of information about the risks in an economic 
transaction undermines one’s consent to accept risk. 

Individual perceptions and preferences regarding risks 
can be fragile, changeable, overly sensitive to initial impres¬ 
sions, and unreliable. This raises crucial questions for poli¬ 
cymakers. Whim public perceptions and statistical realities 
conflict, is it the decisionmaker’s duty to represent the views 
and preferences of members of society, or to protect what he 
considers to be in their true interests? How can a line be 
drawn between responsibility and paternalism when public 
preferences appear to be based on inaccurate perceptions? 
Does the judgment that a population risk is acceptable apply 
to the median, the average, the most highly susceptible, or 
the most risk-a verse individual in the population? 

In practice, the distribution of risks and risk perceptions 
within the population at risk is often left unexplored. In¬ 
stead, the indmdual risk to the maximally exposed individ¬ 
ual is given special attention by regulatory agencies. The 
assumption is that if risk to the maximally exposed individ¬ 
ual is acceptably small, then the risk to the entire population 

1048 


is plausibly also acceptable. However, as discussed above, 
this view is suspect: population risk and individual risk 
should be assessed separately. For example, a maximally 
exposed adult may have a hazard rate that is higher than a 
child’s, even though both are identically exposed to a partic¬ 
ular toxic chemical. 

In addition, the alternative concept of a “maximally 
threatened” individual is poorly defined. For example, who 
is more “threatened,” an individual whose hazard rate is 
increased from 0.01 to 0.02, or an individual whose hazard 
rate is increased from 0.02 to 0.03? The former faces 50 years 
of lost life expectancy (with it being considerably more likely 
than not that the loss will be greater than its expected value), 
while the latter faces only a 17 year reduction in life expec¬ 
tancy. On the other hand, with less expected life left, the 
second individual might be thought to suffer more for each 
additional expected year lost. 

Procedural Legitimacy 

Risk decisions usually involve numerous parties with con¬ 
flicting interests. Individuals may be considered to have 
accepted a risk “voluntarily’ if they “agree to” the decision¬ 
making process leading to it. Very often the perceived legiti¬ 
macy of that process depends on the degree to which the 
risk-bearing public could participate in regulatory decisions. 
The history of nuclear power and hazardous facility siting in 
this country illustrates the close connection between percep¬ 
tions of voluntary participation (or opportunity to partici¬ 
pate) in judging risk acceptability, the perceived legitimacy 
of regulatory processes, and the acceptability of risks. 14 - 15 

An individual may agree to abide by the results of a social 
decision process because she expects to gain from the process 
on average, even though she may lose from particular deci¬ 
sions. From this perspective, acceptability of each risky 
prospect is not the most relevant issue. Rather, the accept¬ 
ability and equity of the entire portfolio of risks, selected 
through the process over time, are what matter. 16 We will 
develop this theme by examining the regulatory and judicial 
process by which our society’s risk activity portfolio is large¬ 
ly determined in practice, with focus on its fairness when 
methods and results are at the frontiers of knowledge and 
when societal risks, economic costs, and benefits may be 
large. 

Ptrlvate Litigation 

Private litigation over environmental injuries have been 
standard fare for hundreds of years. William Aldred, to take 
one well known example, successfully sued his neighbor for 
damages on the ground that the neighbor’s pigsty “corrup¬ 
ted” the air and thereby prevented Aldred from living in his 
own home. 17 From these humble common law beginnings, 
courts and legislatures have developed a massive body of 
private law to compensate environmental injuries by award¬ 
ing damages and to prevent future injuries through both 
injunctive relief and the deterrent effect of potential damage 
awards. 

Although private litigation is no longer the principal 
means to regulate environmental injuries, it continues to 
play a potentially important role, especially with regard to 
its principal goals of compensation and deterrence. Private 
litigation is almost the sole means, other than first party 
insurance, to obtain monetary compensation for personal 
injuries and property damage, something that most regula¬ 
tory schemes fail to do (although they could). In addition, 
many regulatory schemes are not comprehensive in scope; 
the legislature and the agency have failed to regulate (or 
failed to regulate adequately) significant environmental 
problems. In these cases, private litigation could supplement 
or fill in the gaps in existing regulatory programs. 
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Finally, nuisance and other tort doctrines often allow 
plaintiffs to secure prompt injunctive relief, such as a tempo¬ 
rary restraining order, to prevent imminent injuries. A judge 
will grant relief after making an ad hoc balancing of the 
equities in the particular case. Under most regulatory 
schemes, by contrast, an injured or threatened citizen must 
first persuade a government official to seek injunctive relief 
from the court. 

Despite the venerable origins of private environmental 
litigation, and its unique strengths, there are serious ques¬ 
tions about the appropriateness of private remedies for poly¬ 
centric social questions, and the capacity of courts to decide 
environraental tort cases. Although some of the following 
problems could be cured by legislative reforms, 18 - 20 others 
are more resistant. 

Statutes of limitations. Statutes of limitations tradition¬ 
ally have posed an impassable obstacle to recovery if the 
injury does not manifest itself for many years. Many states, 
however, have reduced this obstacle by postponing the time 
limits for filing suit until the injury manifests itself or until 
the link between exposure and injury would be known to the 
“reasonable person,” even though it may not be known to 
the actual plaintiff. 

Litigation costs. Private litigation is expensive. Many law¬ 
yers are unwilling to undertake a private suit with a low and 
uncertain probability of success, even though the suit may 
have merit. The result is substantial undercompensation 
and reduced deterrent effect. 

Complexity . Environmental problems often involve com¬ 
plex, uncertain, and sometimes unresolvable scientific is¬ 
sues. Is it realistic to expect that judges and juries will be 
able to intelligently address and resolve the technical and 
scientific questions when science cannot provide defensible 
answers? How will firms be able to make informed, long¬ 
term investments if the outcomes of cases are so uncertain? 

Cases alleging environmental injury may take several 
years to resolve. In part, this is a result of the scientific 
complexity of the assumptions, theories, and data underly¬ 
ing the disputed factual issues. In part, lengthy delays occur 
because the judicial system does not have the administrative 
capacity to handle mass-injury cases, such as injuries from 
exposure to asbestos. More fundamentally, there has been a 
basic shift in the focus of tort law. Environmental tort cases 
today are not bipolar disputes, such as the one between 
William AJdred and his neighbor. Instead they affect: 

great aggregations of people and vast economic and social inter¬ 
ests. The decisions in these cases are preoccupied ... with 
advancing public control of large-scale activities and altering 
both the distribution of power and the nature of social values. 

In such cases, the parties are ... mere placeholders for these 
larger social interests . 21 

What sliould a court do if the requested injunctive relief 
would injure numerous persons who depend on the polluter 
for employment, taxes, and consumer products? Since these 
cases raise policy issues involving the allocation of resources 
among different segments of the community, should those 
issues be decided in court or left to the political process? 

Causation. Causation may be an intractable issue in toxic 
tort law. 22-25 There are really two causation problems, 
known as the indeterminate defendant and the indetermi¬ 
nate plaintiff . 21 The indeterminate defendant problem oc¬ 
curs because in most cases there are numerous sources of 
pollution, which makes it difficult to directly identify the' 
source (or sources) that caused the plaintiffs injury. Some 
courts have addressed this problem by apportioning liability 
among defendants through a market share theory, where the 
harm results from an identifiable product. 26 This approach 
has no applicability where the injury may have resulted from 
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a variety of ubiquitous chemicals dispersed through the en¬ 
vironment, some of which act synergistically. The market 
share theory also may be of little help when, as is common in 
toxic torts, the injury manifests itself years after the injuri¬ 
ous exposure occurred, and the potential plaintiffs have 
gone out of business or are difficult to identify. 

The indeterminate plaintiff problem arises because many 
injuries (particularly injuries to health) are “nonsignature,” 
meaning that the injuries could have resulted from a number 
of causes, some of which are natural. For example, although 
several members of the community may have evidence that 
the chemicals in the defendant’s air emissions cause lung 
cancer, comparisons with other communities suggest that 
most of the lung cancer cases would have developed regard¬ 
less of the defendant’s polluting activity. In the Agent Or¬ 
ange case, which began in 1975 and concluded in 1984, the 
trial judge granted summary judgment to several chemical 
companies against non-settling plaintiffs, largely on the trial 
judge’s conclusion that the plaintiffs had failed to establish 
this kind of causation. Although the court also approved a 
$180 million settlement covering most plaintiffs, the court’s 
approval was based more on sympathy for the veterans than 
on belief that they had demonstrated causation. 27 ’ 28 The 
problem is easy to state but difficult to resolve: 

identification , ordinarily a routine issue of cause in fact at 
common law, is a costly enterprise that relies on types of evi¬ 
dence and probability judgments which can be regarded as ill- 
suited to traditional resolution through the adversary process. 20 

One problematic aspect of the indeterminate plaintiff is¬ 
sue is illustrated by the following example. Suppose there 
was a clear correlation between the defendant’s polluting 
activity and a 15 percent increase in the expected number of 
lung cancer cases in the vicinity of the defendant’s plant (of 
course, such correlations are almost never clear cut for non¬ 
signature diseases), but that it was unclear which cases re¬ 
sulted from the defendant’s air emissions. Should damages 
be awarded in full to every person with lung cancer? Or is the 
proper award to each person with lung cancer 1/115 of a sum 
of money representing damages for 15 cases (i.e., 15 full 
awards spread out over every 115 people with lung cancer)? 
It is doubtful in these circumstances that it is ever possible 
to avoid both overcompensation and undercompensation. 

Agency Decisionmaking 

In principle, a regulatory system should overcome many of 
the shortcomings of private litigation. Issues of expertise, 
complexity, political accountability, and causation should 
prove to be smaller obstacles. Nevertheless, pervasive scien¬ 
tific uncertainty, as well as the ambiguity inherent in statu¬ 
tory commands, make agency decisionmaking problematic 
as well. 

A regulatory agency generally uses one of two processes to 
manage risks: administrative adjudication or rulemaking. 
Administrative adjudication is the case-by-case determina¬ 
tion of regulatory issues, such as whether to cancel the regis¬ 
tration of a particular pesticide. In adjudication, an adminis¬ 
trative law judge presides over a formal, trial-type hearing 
and, after listening to evidence, formulates findings of law 
and fact. Rulemaking, by contrast, produces regulations 
governing the activities of entire industries. Most federal 
rulemaking proceedings under environmental and worker 
safety statutes do not employ live hearings, but instead rely 
on written submissions that constitute the administrative 
record. Generally, most agency policies and decisions con¬ 
cerning health and safety are generated through rulemaking 
proceedings. 

One of the hallmarks of modern agency decisionmaking in 
the United States is extensive public participation. 29 Before 
adopting a regulation, for example, the agency must publish 

1049 


Source: https://www.industrydocuments.ucsf.edu/docs/xfclOOOO 


202SS45994 



the proposed regulation, a summary of the reasons and fac¬ 
tual bases for the regulation, and the time and place for 
submitting mitten comments. Anyone may submit written 
comments, reports, data, or objections related to the agen¬ 
cy’s proposed rule, and any documents submitted to the 
agency are available for public review. In publishing a final 
regulation, the agency must explain the basis for the rule, 
including any changes from the proposed rule, and must 
respond to (but need not rely on) all material comments and 
objections. 

Public participation serves multiple, sometimes conflict¬ 
ing purposes. At one level, public participation legitimates 
agency decisionmaking. Many agency decisions are contro¬ 
versial because) there are not adequate data leading unam¬ 
biguously to a single policy choice. Such decisions are neces¬ 
sarily value-laden. Public participation, coupled with the 
requirement that the agency take seriously and respond to 
all material comments, can ensure that all interested parties 
have roughly equal access to political decisionmaking, and 
thus can help to ensure at least a minimal level of public 
accountability by agency officials. 

At another level, unrestricted public participation may 
also help to ensure that the agency has made the “best” 
decision. By being required to consider all points of view, the 
agency is much less likely to overlook relevant data or per¬ 
spectives, and also is more likely to be able to overcome its 
institutional biases. 30 

In addition to procedural constraints on agency decision¬ 
making, the legislature also sets the substantive criteria for 
agency regulations in virtually all risk management statutes. 
One characteristic of modern environmental and worker 
safety statutes is their relative specificity. 

The two extremes of pollution control standards are 
“health-based” and “technology-based” standards. An ex¬ 
ample of a “health-based” standard is section 112 of the 
Clean Air Act. Under that provision, the Administrator of 
the Environmental Protection Agency must set a hazardous 
air pollutant standard that “in his judgment provides an 
ample margin of safety to protect the public health.” The 
current judicutl interpretation of this language prohibits the 
Administrator irom considering implementation costs or 
technological legibility in setting an “acceptable” or “safe” 
level of risk. 31 After fixing this “safe” risk level, the agency 
must further reduce the emission rate (to add the statutory 
ample margin of safety) to the extent permitted by imple¬ 
mentation costs and technological feasibility. Thus, under 
this interpretation, even the best available control technol¬ 
ogies do not necessarily meet the statutory standard. 

Not surprisingly, this interpretation has caused conster¬ 
nation in regulatory circles, for it requires the agency to 
determine a level of acceptable risk wholly out of context; 
implementation costs and technological feasibility ostensi¬ 
bly are irrelevant to the agency’s initial determination of 
acceptable risk- There is some reason to believe that the 
EPA will seek to circumvent the statutory restriction. The 
agency recently proposed to define acceptable risk as equiv¬ 
alent to a maximum individual lifetime risk in the neighbor¬ 
hood of 1 X 10“ 4 . The precise number would vary depending 
on unspecified factors; in one example, the risk level was 6 X 
10“ 3 . 32 By proposing a relatively high level of acceptable 
risk—one that few people would define as acceptable—EPA 
effectively would be able to give much greater weight to costs 
and feasibility considerations than if it had begun with a 
more convention^ estimate of acceptable risk. 

An example of a “technology-based” standard is section 
111 of the Clean Air Act. That provision requires the EPA 
Administrator to set emission standards for new sources of 
nonhazardous air pollutants that “reflect the degree of emis¬ 
sion limitation... achievable through application of the best 
technological system ... which (taking into consideration 
the cost of achieving such emission reduction ...) the Ad¬ 
ministrator determines has been adequately demonstrated.” 
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Thus, in contrast to section 112, section 111 requires EPA to 
consider implementation costs and the availability of tech¬ 
nological controls in setting emission standards. 

As these two examples illustrate, the substantive statu¬ 
tory language often is imprecise, and thus leaves the agency 
considerable room for interpretation. How expansive is the 
definition of “public health”? Should the standards be set to 
protect every vulnerable individual, no matter how hyper¬ 
sensitive? If not, where should the line be drawn? How much 
of a margin is an “ample margin of safety”? How should the 
Administrator “consider” costs under section HI? How 
should the Administrator determine what is the “best” sys¬ 
tem of pollution control? When is a technological control 
system “adequately demonstrated”? Plainly, in these provi¬ 
sions the legislature has only defined the broad outlines of 
regulatory policy. Crucial substantive details remain to be 
worked out in agency rulemaking proceedings. 

Despite the inherent ambiguity of the statutory language, 
however, it is evident that the health-based and technology- 
based criteria represent two very different approaches to the 
regulation of human health risks. Even though the statutory 
language leaves the agency considerable policymaking dis¬ 
cretion, these criteria impose important limits on the ambit 
of agency authority. Health-based criteria require the regu¬ 
lator to focus exclusively on health risks—e.g., their nature, 
magnitude, and distribution—in determining acceptable 
emissions standards. Technology-based criteria, by con¬ 
trast, require the regulator to focus entirely on the availabil¬ 
ity and cost of pollution control technology. Thus, the legis¬ 
lature, through the substantive statutory criteria for pollu¬ 
tion standards, defines the factors that contribute to a 
determination of acceptable risk in different circumstances. 

Judicial Review 

A critical element of the rulemaking process is judicial 
review. Roughly speaking, judicial review is designed to en¬ 
sure that the agency has conformed to the statute’s proce¬ 
dural and substantive requirements. If the agency failed to 
comply with the statutory requirements, the court would 
remand the case to the agency for reconsideration in compli¬ 
ance with the statute. The policy goal of widespread public 
participation in agency decisionmaking is advanced here by 
statutes and doctrines permitting any person to seek judicial 
review of agency actions. 

Ensuring that the agency has conformed to the procedural 
requirements is essential to any notion of public participa¬ 
tion and agency accountability. Without adequate judicial 
review, agency officials would be free to disregard conflicting 
perspctives and to make policy choices without a thorough 
public airing. For example, in the course of deciding noc to 
regulate formaldehyde under the Toxic Substances Control 
Act, EPA officials held private meetings with representa¬ 
tives of industry. 33 As a result, opposing views were largely 
left out of the decisionmaking process, EPA deviated arbi¬ 
trarily from the existing cancer policy guidelines, and the 
agency did not follow procedures for internal review of poli¬ 
cy decisions. Judicial review of agency procedures could 
have helped ensure the legitimacy and integrity of the quasi¬ 
political process that is central to agency rulemaking. 

More commonly, judicial review focuses on whether the 
agency’s substantive decision conforms with the statutory 
criteria. Inevitably, this issue is linked with questions in¬ 
volving the extent to which the reviewing court should defer 
to the agency’s interpretation of the statute, and the degree 
to which the court should probe the validity of the agency’s 
technical judgments. 

The courts’ willingness to read statutes instrumentally, 
and thus to disregard agency interpretations, was illustrated 
in Industrial Union Dep’t , AFL-CIO v. American Petro¬ 
leum Instituted In that case, a plurality of the Supreme 
Court remanded the OSHA benzene exposure standard of I 
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ppm to the agency for reconsideration. The Court’s decision 
was ba*ed on its reading of a convoluted statute as requiring 
the agency to show that the health risks to workers were 
“signifileant,” a word that does not appear in the statute. It is 
plain from the Court’s opinion that its interpretation was 
driven by concerns that OSHA’s interpretation would result 
in exclusively strict regulations. 35 

More- recently, the federal courts have assumed a deferen¬ 
tial posture toward agency interpretation of regulatory stat¬ 
utes. In a series of cases over the last five years, the Supreme 
Court has emphasized that for reasons of political account¬ 
ability *uid technical expertise, regulatory agencies have the 
primary responsibility for interpretation. In a case discuss¬ 
ing EPA’s interpretation of one section of the Clean Air Act, 
the Court wrote: 

the regulatory scheme is technical and complex, the agency 
considered the matter in a detailed and reasoned fashion, and 
the decision involves reconciling conflicting policies.... Judges 
are not experts in the field, and are not part of either political 
branch of the Government.... When a challenge to an agency 
construction of a statutory provision, fairly conceptualized, 
really centers on the wisdom of the agency’s policy, rather than 
whether it is a reasonable choice within a gap left open by 
Congress, the challenge must fail . 35 

Nevertheless, some scholars condemn the courts’ default 
in favor of agency interpretation of statutes, 37 ' 38 and thus in 
favor of agency policymaking authority. Other authors, how¬ 
ever, insist that agencies are politically accountable and thus 
in the best position to make the policy decisions inherent in 
statutory interpretation. 39 ' 40 

Of ccinse, if the statute is fairly clear, a court will not allow 
an agency to disregard the statutory language, even though 
the status vastly overregulates the risks. A good example of 
this occurred when a court reviewed an FDA decision to list 
as safe the color additives Orange No. 17 and Red No. 19, 
which iire used in cosmetics. Although the agency deter¬ 
mined, through animal bioassays, that these color additives 
were carcinogenic, 41 the calculated risk assessments showed 
that No. 17 would increase individual lifetime excess cancer 
risk by 2 X 10“ 10 , and No. 19 by 9 X 10“°. The FDA conclud¬ 
ed that these risks were too trivial to regulate. Indeed, there 
was some precedent to suggest that agencies possess an in¬ 
herent statutory authority to disregard “de minimis” or triv¬ 
ial risks. 4 " Unfortunately, this decision apparently conflict¬ 
ed with the express words of the Delaney Clause of the Food, 
Drug and Cosmetic Act, which prohibits all color additives 
that “induce cancer in man or animal.” The court in Public 
Citizen v . Young recognized that the clause was “extraordi¬ 
narily rigid,” but it reluctantly adhered to the statutory 
wording.* 1 

The other area of substantive judicial review involves the 
agency’s judgment that a regulatory standard satisfies the 
“significant risk,” “ample margin of safety,” or some other 
statutory criterion. Under many statutes, a court may re¬ 
mand an agency decision only if it is “arbitrary, capricious or 
an abuse of discretion.” Other statutes require the agency to 
show that its decision is supported by “substantial eviden¬ 
ce.” In interpreting these somewhat ambiguous standards 
the federal courts often have melded them into a single 
“hard-look” doctrine, which is a collection of techniques to 
control agency discretion. Under the doctrine, an agency 
decision am survive judicial review only if the agency has 
given a reasoned explanation of the bases for its decision, 
supported its decision with substantial evidence, explored 
alternatives, given reasons for rejecting the alternatives, and 
responded to public criticisms and objections. 44 

In determining whether the agency’s decision is supported 
by substantial evidence, it is enough “that the administra¬ 
tive record contain(s) respectable scientific authority” sup¬ 
porting the: agency’s factual findings. 45 The Supreme Court 
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has written: 

It is the Agency’s responsibility to determine, in the first in¬ 
stance, what it considers to be a “significant” risk.. . . 
OSHA is not required to support its finding that a significant 
risk exists with anything approaching scientific certain¬ 
ty Thus, so long as they are supported by a body of reputa¬ 
ble scientific thought, the Agency is free to use conservative 
assumptions in interpreting the data with respect to carcino¬ 
gens, risking error on the side of overprotection rather than 
underprotection . 46 

Even where there are no data, or the data sharply conflict, 
a reviewing court will uphold the agency’s policy judgments 
if the agency explains the considerations it relied on. In 
Industrial Union Dep’t, AFL-CIO v. Hodgson , for example, 
the court readily upheld OSHA’s decision to delay a new 
asbestos standard. Given the conflicting scientific views of 
the health impact of the delay, as well as the statutory policy 
to adopt feasible standards, the court held that the delay was 
not irrational. 47 Similarly, in Building & Construction 
Trades Dep’t , AFL-CIO v. Brock , the court was unwilling to 
second-guess OSHA’s finding that certain asbestos exposure 
levels posed a “significant risk” to workers. 48 In short, the 
courts generally defer to the agency’s technical and adminis¬ 
trative expertise even though the agency rationally might 
have made other, perhaps better, decisions, 49 

Inevitably, however, close judicial review of the agency’s 
reasoning gives a court considerable opportunity to express 
its own substantive policy preferences. By i mmersing itself 
in the technical evidence, and determining whether the 
agency decision was “rational,” the court often will not be 
able to avoid substituting its own views on the merits of the 
underlying issue. This may be especially true when the sci¬ 
entific evidence is most controverted. For example, in As¬ 
bestos Information Ass’n v. OSHA t the court reluctantly 
accepted the agency’s assertion that an estimated eighty 
deaths, out of a worker population of 375,000, would consti¬ 
tute a “grave risk” that would justify an emergency tempo¬ 
rary standard for asbestos exposure. Based on the court’s 
own examination of the record, however, the court conclud¬ 
ed that the numerical estimate was speculative and thus 
ins ufficient to support the agency’s finding. As a result, the 
court stayed enforcement of the agency’s emergency tempo¬ 
rary standard. 50 Perhaps because it fears that lower courts 
will routinely intrude on agency policymaking authority, the 
Supreme Court in another case admonished that when re¬ 
viewing agency decisions are “at the frontiers of science... a 
reviewing court must generally be at its most deferential.” 51 
Acceptability is more than probabilities and scientific as¬ 
sessments; it results from a decisionmaking process that is— 
on average—fair. When also viewed in the context of a port¬ 
folio of risks, the process tends to avoid ad hoc solutions. 

The Portfolio Approach to Risk Acceptability 

As illustrated in the preceding cases, risk assessment is 
based on a flux of scientific information concerning often 
highly uncertain or speculative risks. New knowledge, im¬ 
proved ability to control risks, and changes in risk attitudes 
can make a formerly acceptable risk no longer acceptable. 
Decisions about risk acceptability are thus dynamic and 
provisional; they must be monitored and adapted over time. 
For a regulatory agency, the acceptability of a specific risky 
activity depends on the context of other activities and con¬ 
trol opportunities in which it is embedded. This view pro¬ 
vides a new perspective for integrating risk acceptability 
issues into a framework for organizing social risk manage¬ 
ment decisions. 52 

An agency’s approach to risk management can be viewed 
in terms of its management of four sets of risky activities. 
One set contains known problems waiting for regulation. A 
second set consists of suspected problems requiring further 
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investigation and possibly action. Finally, there are two dis¬ 
position sets: one of solved problems that have been investi¬ 
gated and for which regulatory solutions have been estab¬ 
lished that must now be monitored and enforced; and one for 
nonproblems that have been investigated and found not to 
be problems. The known and suspected problem sets are 
sorted in order of decreasing priority of the problems in 
them, forming two rank-ordered lists. As suspected prob¬ 
lems are investigated, and uncertainties about their risks are 
resolved, they change positions in the list for suspected 
problems. They may be moved down and off the suspected 
problem list ^together and onto the nonproblem list, or they 
may be moved up until they are pushed off the suspected 
problem list and inserted into the known problem list. 

Risk management can be viewed as allocating resources to 
resolving problems on the two different action lists. In each 
budget period, the agency must allocate its resources to 
problems on the known and suspected lists. This requires 
trade-offs. Is it better to spend resources addressing another 
known problem or investigating another suspected one? 
When do the unknown risks from failing to explore items on 
the suspected problems list outweigh the losses from defer¬ 
ring action on known problems? And how should the pend¬ 
ing problems wthin each list be ordered in terms of priority? 

The only permanently acceptable risks are those moved to 
the nonproblem set. However, within any given period of 
time, there sire known and suspected problems that are so far 
down on their corresponding priority sets that they will not 
be addressed until long after the many higher-priority prob¬ 
lems that dominate them have been resolved. Such problems 
pose provisionally acceptable risks: risks that are accept¬ 
able until more important ones have been resolved. 

In practice, new problems for investigation and resolution 
are continually being created by industrial society as new 
products and technologies emerge. Each new problem or 
potential problem requires positioning it, in the appropriate 
priority position, on the known problem or suspected prob¬ 
lem list. If the rate at which high-priority problems are 
generated is greater than the rate at which they can be 
investigated, then existing problems will remain provision¬ 
ally acceptable!. 

Of course, the process of setting the regulatory agenda is 
not as simple as this brief description suggests. Many prob¬ 
lems are put on the public agenda as a result of the political 
and legal efforts of opposing parties. Rather than agency 
pull, in which problems are actively sought out for investiga¬ 
tion to protect the public, public push may bring risk man¬ 
agement proble ms onto the judicial, administrative, or legis¬ 
lative agenda. Episodic crises, such as the Bhopal disaster, 
also strongly iiffect the regulatory priorities regardless of the 
agency’s assessment of their significance. 

Although, in principle, toxic tort litigation can be included 
in the portfolio approach, the jurisdictional peculiarities of 
tort disputes stemming from state sovereignty, as well as the 
decentralized trial court system, prevent a centralized man¬ 
agement of risls. This is less of a problem in the federal 
judicial system. Nevertheless, even though federal multidis¬ 
trict litigation is possible, as the Agent Orange case demon¬ 
strates, tort law has a different focus than agency rulemak¬ 
ing under a risk management statute. Tort law emphasizes 
private, individual and class protection. Its objectives are 
principally compensation and to a lesser extent deterrence 
and occasionally punishment. Environmental statutes and 
agency rulemaking, by contrast, seek to prevent public inju¬ 
ries by enforcing standards adopted through a mixed politi¬ 
cal and technocratic process that may emphasize adminis- 
trability as much as public health protection. Given these 
different objectives, it would be odd if the portfolio approach 
were equally ajpplicable to both risk management systems. 

The portfolio approach may also be inapplicable to toxic 
tort litigation because the individual risks, costs, and poten- 
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tial benefits of a case may differ from the societal ones. For 
example, since many of the costs of toxic tort disputes are 
borne by the affected parties, individual perceptions of risks, 
benefits and costs will affect the selection of disputes for 
litigation. The individual benefits of winning a case may be 
smaller than, or different from, the social benefits so that 
litigation that might be socially worthwhile may not be un¬ 
dertaken. 63 As a result, the portfolio approach is most diffi¬ 
cult to apply to private litigation. Thus, social risk manage¬ 
ment by private litigation is a complement to, rather than a 
substitute for, risk management by regulatory agencies. 

The concept of a portfolio of risks is also useful for compa¬ 
nies whose allocation of resources—for example, to risk re¬ 
search, warning, and control—can be adapted to a common 
set of guidelines. Companies could use publicly stated levels 
of acceptable risk in their own risk management decisions. 
Without such clear guidance, manufacturers may be unwill¬ 
ing to produce socially beneficial but potentially risky prod¬ 
ucts (e.g., vaccines) for fear of legal liability, should the 
courts decide in retrospect that the product was “unaccep¬ 
tably” risky. 54 An explicit reliance on the portfolio approach 
avoids the “carcinogen of the month” problem because it 
leads the agency expressly to consider items to be placed on 
the lists without becoming either engulfed by them or too 
lax. Public scrutiny during rulemaking and judicial review 
under regulatory law will now work toward plausible solu¬ 
tions to difficult and polycentric problems. 


Conclusions 

The concept of “acceptable” risk levels seems easiest to 
justify as a device for constraining and guiding regulatory 
risk management efforts and resource allocation over time. 
It is less clearly applicable to the private decisions of eco¬ 
nomic agents (consumers or producers), where the availabil¬ 
ity of detailed case-specific information about costs, uncer¬ 
tainties, and benefits makes it reasonable to expect and 
require more careful and detailed approaches to case-by¬ 
case risk management. 

Although the need for simple, concrete, easily implement¬ 
ed standards of acceptable risks for guiding private sector 
health and safety risk management decisions cannot be de¬ 
nied, it seems unlikely that this need can be met without 
ignoring some important aspects of risk and uncertainty. 
The acceptability of risks is not an easy question and gener¬ 
ally may not have answers that are both easy to apply and 
fully defensible on rational or moral grounds. 

In this paper, we have argued that the most realistic and 
constructive view of risk acceptability for the practitioner 
may be that it is a property of risk management decision 
processes , rather than of isolated risky activities or situa¬ 
tions. Numerous cases in the recent history of risk litigation 
indicate that it is the interaction of such processes—as in the 
balancing of the proper role of judicial intervention against 
the expertise and discretion of regulatory agencies—that 
determines risk acceptability in particular cases. Acceptabil¬ 
ity of a technological risk is thus not only a matter of risk 
statistics and objective numbers, but of social processes and 
of trade-offs that society is willing to make to achieve deci¬ 
sions that are on average reasonably fair, efficient, workable, 
and acceptable. 
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